| | |
| | |
|
| | | // special HTML characters
|
| | | TEXT['\''] = "'".toCharArray(); // 单引号
|
| | | TEXT['"'] = """.toCharArray(); // 单引号
|
| | | TEXT['"'] = """.toCharArray(); // 双引号
|
| | | TEXT['&'] = "&".toCharArray(); // &符
|
| | | TEXT['<'] = "<".toCharArray(); // 小于号
|
| | | TEXT['>'] = ">".toCharArray(); // 大于号
|
| | |
| | |
|
| | | public static void main(String[] args)
|
| | | {
|
| | | String html = "alert('11111');";
|
| | | String html = "<script>alert(1);</script>";
|
| | | // String html = "<scr<script>ipt>alert(\"XSS\")</scr<script>ipt>";
|
| | | // String html = "<123";
|
| | | // String html = "123>";
|
| | | System.out.println(EscapeUtil.clean(html));
|
| | | System.out.println(EscapeUtil.escape(html));
|
| | | System.out.println(EscapeUtil.unescape(html));
|